Re: [awful patch] "Multiple levels of TLS nesting is invalid."

Matt Bernstein wrote:

By this point we've correctly walked from default -> dcs -> dcs-inner. But.. as dcs-inner invokes rlm_ldap, it's using the wrong ldap instance: ... rlm_ldap: Entering ldap_groupcmp() [dcs-inner-files] expand: dc=maths,dc=qmul,dc=ac,dc=uk -> dc=maths,dc=qmul,dc=ac,dc=uk [dcs-inner-files] expand: (uid=%{Stripped-User-Name}) -> (uid=mb)

Let me guess. You have "LDAP-Group" as a check item in the "dcs-inner-files" "users" file. You will need to use the LDAP *instance* name to direct the LDAP-Group comparison to the correct version of the LDAP module. e.g. "dcs-inner-ldap-LDAP-Group" Alan DeKok.